Re: Rootkit

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: For users of Fedora <fedora-list@xxxxxxxxxx>
Subject: Re: Rootkit
From: Karl Larsen <k5di@xxxxxxxxxx>
Date: Tue, 23 Oct 2007 17:00:23 -0600
In-reply-to: <1193177533.20173.6.camel@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
References: <2941460.47791193120370689.JavaMail.bob.smith@xxxxxxxxxxx> <471DACC9.6090900@xxxxxxxx> <943be0b10710230223l5f11218dh6c18e9faa608509@xxxxxxxxxxxxxx> <471E64BF.6090803@xxxxxxxx> <1193175454.20173.0.camel@xxxxxxxxxxxxxxxxxxxxxxxxxxxx> <471E6F85.4060304@xxxxxxxx> <1193177533.20173.6.camel@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
Reply-to: For users of Fedora <fedora-list@xxxxxxxxxx>
User-agent: Thunderbird 2.0.0.6 (X11/20070728)

Reading about Rootkit got me interested in chkrootkit so I d/l itand ran it with -p which is quiet and it finished with this:


[root@k5di ~]# chkrootkit -q
eth0: PF_PACKET(/sbin/dhclient)
The tty of the following user process(es) were not found
in /var/run/utmp !
! RUID          PID TTY    CMD

! root 2962 tty7 /usr/bin/Xorg :0 -br -audit 0 -auth/var/gdm/:0.Xauth -nolisten tcp vt7

[root@k5di ~]#

I am confused by this output. Does anyone know what this is and what Ishould do with it?

Follow-Ups:
- Re: Rootkit
  - From: Rick Stevens

References:
- Re: Rootkit
  - From: bob . smith
- Re: Rootkit
  - From: Jordi Prats
- Re: Rootkit
  - From: Dave Burns
- Re: Rootkit
  - From: Jordi Prats
- Re: Rootkit
  - From: Rick Stevens
- Re: Rootkit
  - From: Jordi Prats
- Re: Rootkit
  - From: Rick Stevens

Prev by Date: Re: New horizon's
Next by Date: RE: Dhclient problem
Previous by thread: Re: Rootkit
Next by thread: Re: Rootkit
Index(es):
- Date
- Thread

[Index of Archives] [Current Fedora Users] [Fedora Desktop] [Fedora SELinux] [Yosemite News] [Yosemite Photos] [KDE Users] [Fedora Tools] [Fedora Docs]